High-level Security Requirements include which elements?

High-level Security Requirements include which elements?

• A. Continuity of operations and documentation.
• B. Encryption key management and rotation.
• C. Physical security and access control.
• D. User behavior analytics and monitoring.

Answer: (A)

High-level security requirements set the overarching framework for protecting the organization, focusing on ensuring resilience and governance. Continuity of operations establishes the plan for keeping essential functions running or restoring them quickly after a disruption, which is a fundamental top‑level need for any security program. Documentation, meanwhile, provides the policies, standards, procedures, and records that guide how security is implemented and audited; without solid documentation, the controls and processes aren’t repeatable or enforceable. The other items describe specific controls or capabilities—cryptographic key management, physical security measures, and user behavior analytics—which are important, but they are concrete controls rather than the broad, organizing requirements that guide the security program as a whole.

High-level security requirements set the overarching framework for protecting the organization, focusing on ensuring resilience and governance. Continuity of operations establishes the plan for keeping essential functions running or restoring them quickly after a disruption, which is a fundamental top‑level need for any security program. Documentation, meanwhile, provides the policies, standards, procedures, and records that guide how security is implemented and audited; without solid documentation, the controls and processes aren’t repeatable or enforceable. The other items describe specific controls or capabilities—cryptographic key management, physical security measures, and user behavior analytics—which are important, but they are concrete controls rather than the broad, organizing requirements that guide the security program as a whole.